Aleph: how to ask for your data to be deleted

Ask by email

Email legal@vandorio.com with the subject Data deletion request. No account or form is needed. The privacy and grievance contact is Darren Joy Vipparty. The app may appear under the name Mayatrix.

Say who you are:

• A business owner or team member: the business name and the phone number you sign in with. Say whether you want some data deleted or the whole account closed. Closing an account needs the owner.
• A customer of a business: the business you messaged, and the WhatsApp number you used. Do not send passwords, one-time codes, card details or identity documents. We will tell you if we need more to check it is you.
• Someone who connected Aleph through Facebook or Meta: the Meta business name and the WhatsApp number.

What happens next

1. We aim to reply within 24 hours with a case reference. That confirms we got it. It does not confirm a record exists or that deletion is done.
2. We check it is really you or the owner, in proportion to what you ask.
3. We work out which records and providers are involved.
4. For a customer request we work with the business, because it controls the records. A customer cannot close a business's whole account.
5. We aim to finish a verified request within 30 days and tell you what was deleted, what was kept and why. For a business account with invoices, payment records or pilot membership, we cannot promise 30 days until the retention review is finished. We aim to resolve a complaint within 7 days.

What a business account deletion covers

The owner can ask for an export first (available 7 days). Today, deletion of a business account that has invoices, payment records or pilot membership cannot complete until the legal retention review is finished. We will tell you this when you ask. We can still export your data and handle smaller deletion requests by hand. Deletion is approved by a Vandorio administrator before it runs. When it can run, it:

• switches off access for the team and stops any bot;
• deletes uploaded files (registration documents, catalogue images, payment QR images, message media);
• deletes the raw copies of WhatsApp events we received from Meta and any onboarding chat messages;
• archives the business's AI project, if one was ever created (the AI provider may keep it under its own terms);
• deletes the business's records: customers, messages, orders, invoices, catalogue and settings;
• keeps a thin record of registration, payment and security events with personal fields removed, and a receipt with no content.

What stays

• Backups. Erased data can stay in a backup until it rolls off (the 7 most recent daily copies today, or older ones if a run failed). It is not used. If we ever restore a backup, our procedure is to re-apply earlier deletions first. We have not yet tested this on the hosted system.
• Records the law makes us or the business keep, such as tax invoices. We keep only the fields required and explain.
• Legal holds. Our process for pausing deletion for a legal hold is not yet operating.
• Copies we do not control: Meta, the business, and people you messaged. Disconnecting Aleph in Meta does not erase our copy. A request to us does not erase theirs.
• Test restore copy. A separate, paused copy of the hosted test database was made to prove recovery. A deletion request does not reach it. It is removed when we retire it.
• Our platform access token. The access token Vandorio holds to talk to Meta is ours, not the business's, and is not deleted with a business account.

See the Privacy Policy.